Provider profile
Parameter
Parameter offers AI-agent pentesting for web apps, APIs and infrastructure, needing only a URL and credentials. One run produces executive, customer, auditor and remediation reports.
Visit Parameter Back to comparison
Last checked 9 November 2026. Facts come from Parameter's own public pages, linked below.
At a glance
| Type | AI-assisted testing service |
|---|---|
| Delivery | automated Autonomous AI agents run the pentest; they pause for the customer's approval before chaining or escalating. |
| Scope | Web apps: yes APIs: yes Cloud: not published Network: not published Mobile: not published AI apps: not published |
| Pricing model | custom quote |
| Turnaround | First findings in 24 hours; most runs finish the same day they start. Time from start to first findings and typical run length. source |
| Retesting | Free re-testing is listed for Single App and inherited by higher tiers. source |
| Sample report | public source |
| Compliance mentioned | SOC 2, ISO 27001, PCI DSS, FedRAMP, HIPAA |
| Integrations | Linear |
Pricing
Prices are not published. You need to ask for a quote.
Three tiers (Single App, Rightsized, Continuous) with no dollar amounts; all go to sales. Pricing follows the size of what is tested, not seats.
Credentials
- SOC 2 Type I report (Type II observation period in progress) evidence
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Teams that want a quick automated web app and API pentest with auditor-mapped reports and a public sample to review first.
Tradeoffs
No prices are published. The SOC 2 report is Type I only, and the Type II period is not complete.
Sources
- Parameter pentesting (checked 9 November 2026)
- Parameter homepage (checked 9 November 2026)
- Parameter security (checked 9 November 2026)
See something wrong or out of date? Send a correction.